🔎 IntroductionContinue reading on Medium » (https://p4n7h3rx.medium.com/cloudflare-tunnel-origin-exposure-weaponized-6ae5b1f09bb2?source=rss------bug_bounty-5)

The Little CV + CSRF That Broke an Account
https://0onoproblem.medium.com/the-little-cv-csrf-that-broke-an-account-3c0abbc08597?source=rss------bug_bounty-5

السَّلاَمُ عَلَيْكُمْ وَرَحْمَةُ اللهِ وَبَرَكَاتُهُ. اللَّهُمَّ صَلِّ عَلَى مُحَمَّدٍ وَعَلَى آلِ مُحَمَّدٍ، كَمَا صَلَّيْتَ عَلَى…Continue reading on Medium » (https://0onoproblem.medium.com/the-little-cv-csrf-that-broke-an-account-3c0abbc08597?source=rss------bug_bounty-5)

How I Discovered CVE-2025–0133 – Reflected XSS with Shodan Recon

Hello Hackers,Continue reading on Medium »
Read more...

Bug Bounty Time Travel — Hacking the Past to Predict the Future

⏳ IntroductionContinue reading on Medium »
Read more...

IoT Security - Threat modeling with MITRE ATTACK
https://www.reddit.com/r/Pentesting/comments/1n5kb0e/iot_security_threat_modeling_with_mitre_attack/

<!-- SC_OFF -->hi folks, Just started in IoT security and want to point out this site for threat modeling and threat analysis for IoT embedded devices - MITRE EMB3D™ (https://emb3d.mitre.org/) Hope this will be new standard for IoT, cause its really comprehensive and detailed analysis from MITRE team. If anyone is included in CS of embeded devices dont skip this one! public webinar available - https://www.youtube.com/watch?v=umld2nY6uas&ab_channel=MITREEMB3D Tnx MITRE! <!-- SC_ON --> submitted by /u/Expensive-One-939 (https://www.reddit.com/user/Expensive-One-939)
[link] (https://www.reddit.com/r/Pentesting/comments/1n5kb0e/iot_security_threat_modeling_with_mitre_attack/) [comments] (https://www.reddit.com/r/Pentesting/comments/1n5kb0e/iot_security_threat_modeling_with_mitre_attack/)

What topics are you pursuing in pentesting right now?
https://www.reddit.com/r/Pentesting/comments/1n5nb9s/what_topics_are_you_pursuing_in_pentesting_right/

<!-- SC_OFF -->As a pentester I'm digging into AI (although I'm tired of this word and hype, but can't miss it) and clouds - both look interesting, and I noticed that a lot of penetration tester vacancies now require them by default. What are you pursuing and why? <!-- SC_ON --> submitted by /u/No_Engine4575 (https://www.reddit.com/user/No_Engine4575)
[link] (https://www.reddit.com/r/Pentesting/comments/1n5nb9s/what_topics_are_you_pursuing_in_pentesting_right/) [comments] (https://www.reddit.com/r/Pentesting/comments/1n5nb9s/what_topics_are_you_pursuing_in_pentesting_right/)

From Zero to My First Critical XSS Finding

A Step-by-Step Guide from Recon to ExploitationContinue reading on Medium »
Read more...

Trusting 3rd Party Libraries: A Growing Cybersecurity Risk

In today’s technology world, using 3rd party libraries, frameworks and open-source code has become a common practice for developers. These…Continue reading on Medium »
Read more...

Bypassing Subscription Restrictions: A Business Logic Vulnerability in a Video Streaming App

Discover how attackers exploit business logic vulnerabilities to stream paid content for free.Continue reading on Medium »
Read more...

“Day 26: The Logic Bomb — How I Hacked 0.1% of a Million-User Platform in 10 Minutes”

Exploiting a Flawed State Machine in Password ResetContinue reading on InfoSec Write-ups »
Read more...

How I Discovered CVE-2025–0133 – Reflected XSS with Shodan Recon
https://zuksh.medium.com/how-i-discovered-cve-2025-0133-reflected-xss-with-shodan-recon-33297703bfc0?source=rss------bug_bounty-5

Hello Hackers,Continue reading on Medium » (https://zuksh.medium.com/how-i-discovered-cve-2025-0133-reflected-xss-with-shodan-recon-33297703bfc0?source=rss------bug_bounty-5)

A Critical Zero-Day in Atlassian Jira Service Management Cloud: Password Reset Account Takeover

0-Day ATO By Reset PasswordContinue reading on Medium »
Read more...

The Bug Hunter’s Diary: Earning Bounties Legally

Continue reading on Medium »
Read more...

From image Upload to Workspace Takeover: Deconstructing a Critical Stored XSS Attack

A seemingly harmless feature — file uploading — became the entry point for a complete workspace takeover in a recent vulnerability found…Continue reading on Medium »
Read more...

4 XSS refletidos e 1 HTML Injection em menos de 10 minutos

olá a todos, hoje vou falar como eu achei 4 xss e um html injection.Continue reading on Medium »
Read more...

Web Security Tip: Stop Cross-Site Scripting (XSS) with X-XSS-Protection & Content Security…

By ZoningxtrContinue reading on Medium »
Read more...

The Digital Bounty Hunter: How to Find and Report Bugs for Cash

How a Broke College Student Turned Curiosity into Cash—Without Leaving His Dorm RoomContinue reading on Write & Earn »
Read more...